Senior DevSecOps Engineer Full Time

Summary:

The Senior DevSecOps Engineer at CACI, a remote US role, supports DoD/AF cloud-native solutions for Zero Trust goals. CACI, with over six decades of innovation, advances national security missions. This 6-month position (June–Dec 2025, with possible extension) involves developing Keycloak identity solutions, CI/CD pipelines, and Kubernetes deployments within an agile, integrity-driven team.

Responsibilities:

• Develop and manage Keycloak Identity Management solutions for Platform One.
• Maintain and enhance custom Keycloak realms, themes, and identity flows (OIDC, OAuth2, SAML).
• Support ICAM initiatives including the migration from Keycloak to Okta.
• Design and deploy identity-focused Kubernetes-native solutions.
• Build and maintain CI/CD pipelines, automated test frameworks, and secure production deployments.
• Ensure compliance with DoD and DAF directives (e.g., STIGs, RMF, ATO).
• Provide operational support including incident response and tiered ticket troubleshooting.
• Support RBAC/ABAC implementation and ICAM Federation compliance requirements.

Requirements:

• 7+ years Development & DevSecOps experience w/ Bachelors or additional relevant experience.
• US Citizenship & Eligibility to obtain a US Secret Clearance.
• 2+ years experience with Keycloak, including realm configuration, protocol integrations (OIDC/SAML), and custom theming.
• 3–5 years of Java development experience, ideally from a software engineering background.
• 2–5 years experience with scripting and automation using Python, Bash, or similar.
• 3–5 years experience designing and deploying Kubernetes-based solutions.
• Experience with CI/CD pipelines, containerization, and secure DevSecOps practices.
• Strong familiarity with DoD compliance requirements, such as ATO, STIGs, FedRAMP.

Benefits:

• At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.